ZDI-26-657
CRITICAL 9.8
Published
Sep 10, 2026
ASUS Control Center Express Agent Missing Authentication Remote Code Execution Vulnerability
ASUS
This vulnerability allows remote attackers to execute arbitrary code on affected installations of ASUS Control Center Express Agent. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8.